AI Factory France (AI2F) is committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR). This policy explains how we collect, use, and safeguard personal data via our public website and future user portal services.

Data Controller

The data controller responsible for processing personal data collected via this website and portal is:

AI Factory France Coordination
GENCI
6 bis Rue Auguste Vitu, 75015 Paris, France

Data We Collect

We may collect and process the following types of data:

1. When you visit the public website:
• Technical data: IP address (anonymised), browser type, operating system, referral source, pages viewed, time and date
• Cookies: See section below
• Contact data: If you reach out to us (name, email, organisation)
2. When you register or use AI2F services (via the user portal):
• Identity and access data: Name, email, organisation, job title, authentication credentials or tokens
• User account data: Roles, project affiliations, registration information
• Usage data: System logs, platform access times, service activity (e.g., compute hours)
• Support data: Any information provided when requesting technical or user support

We do not knowingly collect sensitive personal data (e.g., political, religious, or health information).

Purposes and Legal Basis for Processing

We process personal data for the following purposes:

Purpose	Legal Basis
Website operation and analytics	Legitimate interest
Responding to contact or newsletter requests	Consent or legitimate interest
Managing platform registration and authentication	Contract performance
Allocating and tracking compute/data resources	Contract performance, legal obligations
Providing user support and training	Contract performance
Reporting to national and EU funders	Legal obligation, legitimate interest
Ensuring IT security and preventing misuse	Legitimate interest, legal obligation

Where required (e.g., optional analytics or surveys), we will seek your explicit consent.

Data Retention

We retain personal data only as long as necessary for the purposes listed:

• Cookies: up to 13 months
• Contact form/event submissions: up to 12 months
• Newsletter subscription: until unsubscribed or end of the initiative
• Registered user accounts and project data: up to 2 years after end of access
• Platform usage logs and accounting data: up to 5 years
• Support tickets: typically 3–5 years

Data Sharing and Transfer

We do not sell or trade your data. Data may be shared with:

• AI2F consortium members (e.g. GENCI, Inria, CNRS, CEA,…) for service delivery and support
• Your home organisation (for verification or coordination)
• Contracted service providers (e.g. hosting, analytics), under strict confidentiality
• Public authorities when required by law or regulation
• National/EU funders (e.g., EuroHPC JU) for project reporting

Data is not transferred outside the EEA unless adequate safeguards are in place (e.g. to Switzerland or in accordance with software license agreements).

Cookies

We use cookies to improve your browsing experience and collect anonymised statistics:

Cookie	Purpose	Duration
_pk_testcookie	Checks browser support	30 minutes
_pk_ses / _pk_cvar / _pk_hs	Tracks session pageviews	30 minutes
_pk_id#	Recognises repeat visitors	13 months

 

We use Matomo (self-hosted) for analytics. IP addresses are anonymised, and no personal profiles are built.

You can opt out via the cookie banner or browser settings. Blocking cookies may affect functionality.

Data Security

We apply appropriate technical and organisational measures to protect your data, including:

• Encrypted web access (HTTPS)
• Secure hosting environments
• Role-based access controls
• Routine monitoring and updates

Your Rights Under the GDPR

You have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Request erasure (« right to be forgotten »)
• Restrict or object to certain processing
• Withdraw consent (where applicable)
• Request data portability (where relevant)

To exercise these rights, contact us at contact »at »aif-france.fr
You may also lodge a complaint with the CNIL (www.cnil.fr) or another competent data protection authority.

Updates to this Policy

We may update this policy to reflect legal or operational changes. The latest version is always available on this page. Substantial changes will be communicated as appropriate.

Legal Notice

This website is operated by the AI Factory France consortium.
Publication Director: AI Factory France
Hosting Provider: OVHcloud – 2 rue Kellermann, 59100 Roubaix, France

All content is protected under applicable copyright law.
External linking is allowed, provided it does not damage AI2F’s reputation and includes source attribution.

Any questions? Reach out to us at contact »at »aif-france.fr